diff --git a/app/controllers/repositories/lfs_api_controller.rb b/app/controllers/repositories/lfs_api_controller.rb
index 32119ddf89e6aee898b6e258b3b974bc0840cc36..da243a0301e51baaae23b364a1a1789bfcdd3978 100644
--- a/app/controllers/repositories/lfs_api_controller.rb
+++ b/app/controllers/repositories/lfs_api_controller.rb
@@ -64,11 +64,13 @@ def download_objects!
         .for_oids(objects_oids)
         .index_by(&:oid)
 
+      guest_can_download = Guest.can?(:download_code, project)
+
       objects.each do |object|
         if lfs_object = existing_oids[object[:oid]]
           object[:actions] = download_actions(object, lfs_object)
 
-          if Guest.can?(:download_code, project)
+          if guest_can_download
             object[:authenticated] = true
           end
         else